Enterprise Privacy & Trust

Privacy Policy

How UpSkills Bharat protects, encrypts, and processes organizational data across intelligent workflows and integrations.

Effective: January 2026
Version 2.4
SOC 2 Type II Certified

01. Scope & Overview

At UpSkills Bharat ("we", "our", or "us"), we are committed to safeguarding the privacy and integrity of your corporate and personal information. This Privacy Policy governs all services, software, APIs, and intelligent workflow automation platforms provided by UpSkills Bharat.

We operate on a fundamental principle of data minimization: we only process information strictly required to orchestrate your workflows, sync with your authorized integrations, and optimize operational velocity.

02. Information We Collect

Depending on how your organization interacts with UpSkills Bharat, we collect and store:

  • Account & Administrative Data: Work email, name, organization name, role, and enterprise authentication identifiers (SSO/SAML credentials).
  • Integration Credentials & OAuth Tokens: Encrypted tokens authorizing connections to native services such as GitHub, Notion, Gmail, Slack, Stripe, Jira, Airtable, AWS, and Okta.
  • Workflow Telemetry & Metadata: Execution timestamps, step execution states, error logs, and payload schemas necessary for pipeline observability.
  • Operational Analytics: Aggregate performance metrics, average pipeline latencies, and uptime telemetry to ensure platform reliability.

03. Workflow Data & AI Processing

UpSkills Bharat utilizes predictive intelligence to optimize workflows and identify operational bottlenecks. We enforce strict isolation boundaries:

Zero Model Training

Customer data is never used to train public or foundational AI models.

In-Memory Execution

Dynamic payloads are processed in volatile memory and purged immediately post-execution.

Tenant Isolation

Every organization operates within isolated logical and cryptographic boundaries.

Payload transformation rules and trigger sequences remain the exclusive intellectual property and confidential information of your organization.

04. Encryption & Security Standards

Security is built into every layer of the UpSkills Bharat architectural stack:

  • Encryption at Rest: All stored database records, workflow configurations, and credentials are encrypted using industry-standard AES-256 with rotating keys via dedicated Key Management Systems (KMS).
  • Encryption in Transit: All HTTP and WebSocket communications are enforced over TLS 1.3 with strict HSTS headers.
  • Enterprise Single Sign-On (SSO): Integration support for SAML 2.0, Okta, Azure AD, and Google Workspace with granular Role-Based Access Control (RBAC).
  • Continuous Vulnerability Auditing: Regular automated penetration testing and annual independent SOC 2 Type II audits.

05. Third-Party Integrations

When you connect third-party platforms to UpSkills Bharat, we only request the minimal OAuth scopes required to fulfill the defined automation logic. We do not sell, rent, or monetize any third-party payload data.

Data passed through webhook listeners and API connectors is strictly dispatched to your designated endpoints without unauthorized intermediary persistence.

06. Data Retention & Deletion

We retain workflow run histories and log data for the duration specified in your organization's configuration (default 30 days for operational logs, customizable for enterprise customers).

Upon workspace deactivation or upon written request, all associated keys, tokens, and telemetry are permanently deleted from active nodes and expunged from cold backups within 30 calendar days.

07. Regional Compliance & Rights

UpSkills Bharat complies with global and regional data protection frameworks:

  • Digital Personal Data Protection (DPDP) Act (India): Full compliance with national data governance guidelines and localized storage options.
  • General Data Protection Regulation (GDPR - EU): Standard Contractual Clauses (SCCs) and complete support for Data Subject Access Requests (DSAR).
  • California Consumer Privacy Act (CCPA/CPRA): Transparent disclosure and zero-sale assurances for corporate and end-user data.

08. Contact & Data Protection

For privacy inquiries, Data Processing Agreements (DPA), or to exercise your statutory privacy rights, please reach out directly to our security and compliance office:

UpSkills Bharat Compliance Office
Enterprise Inquiries: sales@upskillsbharat.com